This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/36D3DC38AA9311ECB5C88036C4F9AE02.roa File: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (raw, json) Hash identifier: i7wEnbCyGMVzc1IAkdcmx0nvf45iFjmn6BBF93GVkvU= Subject key identifier: 03:A8:FD:CF:09:4E:A3:CB:6A:EB:CD:1C:8A:1C:DA:C3:71:6D:B0:9A Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F4C Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/36D3DC38AA9311ECB5C88036C4F9AE02.roa Signing time: Fri 12 Dec 2025 16:13:46 +0000 ROA not before: Fri 12 Dec 2025 16:13:46 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 147019 IP address blocks: 43.92.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8012 (0x1f4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Dec 12 16:13:46 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c3f3a-7e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:9a:7c:67:88:a8:18:c6:17:5f:1f:46:0d: 80:da:74:3c:14:3b:25:cf:bc:b2:74:a7:02:79:9d: 7d:73:a3:48:ae:6e:2c:3a:ab:b4:67:db:89:f7:bf: 73:c9:9c:c0:8a:51:21:a9:bc:67:d7:ab:94:97:40: ae:4a:fe:7a:9f:c4:50:c4:cd:a3:cc:02:70:53:0b: 8a:e7:08:83:d4:4b:2d:79:da:ba:2e:4a:83:93:9b: 9e:d5:99:b8:f3:4e:64:40:2b:8d:e1:ee:f9:aa:ef: 70:41:82:8f:ae:91:ca:d4:80:91:88:bf:ca:71:3f: a9:f5:8b:57:28:e8:14:ef:00:9c:73:ed:e1:29:83: 5d:a6:eb:87:b1:ee:f1:b0:1a:74:4f:db:6f:76:76: c2:c6:9c:10:28:81:8f:2b:8e:1f:97:b0:48:03:ec: 32:91:d6:8c:01:83:9d:51:c8:91:7c:fe:ae:95:ce: 47:49:34:3f:92:9a:a3:84:01:bd:02:70:01:7b:54: 5d:54:2b:d9:1d:ca:43:e2:7d:da:f4:29:dc:8d:18: cf:6c:57:39:9b:68:55:38:31:e6:66:fc:20:a1:fb: 7a:69:0f:0d:16:b3:0f:1f:35:96:73:44:24:6f:79: f2:4a:f5:2d:70:3a:5e:f8:e1:95:34:9b:3f:31:f0: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:FD:CF:09:4E:A3:CB:6A:EB:CD:1C:8A:1C:DA:C3:71:6D:B0:9A X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/36D3DC38AA9311ECB5C88036C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.92.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:43:a7:05:78:d9:21:4d:4b:a6:b3:8a:82:48:98:02:93:8e: 82:83:0f:21:8b:8c:67:a0:45:73:70:e9:e6:95:2d:22:bf:fb: 2e:2c:90:ce:95:da:36:37:a5:1f:b6:80:31:eb:1a:a6:d5:79: 47:ff:78:b8:e7:33:6b:e6:ad:bf:a3:d1:90:ee:d1:41:59:db: a9:c4:a4:f2:97:0d:4b:59:00:22:aa:dc:fc:ea:7c:4f:0f:fb: f4:85:1d:0a:83:4c:55:22:5a:b9:4e:5c:cc:7f:f0:25:cc:cf: 66:a4:3b:b8:15:0c:aa:a9:73:e6:83:5b:6d:9e:c3:21:9d:4c: 3a:6e:4e:83:44:72:fc:d7:77:82:da:42:e0:90:d3:50:8c:d9: a8:a4:69:31:50:0f:fe:1a:51:3c:1e:71:da:31:2b:58:78:3a: 43:83:9b:08:a3:d2:f1:6d:22:54:70:86:13:a5:c9:16:4d:f3: 60:d0:15:dd:98:8a:bc:da:04:60:2c:1c:d7:30:5a:12:b7:91: 0e:a2:a9:a0:d3:0d:d4:5a:68:4b:c6:c6:41:01:28:32:a1:bc: 05:a0:95:36:1c:01:f6:ab:d3:8e:c7:56:b2:18:02:69:7c:ba: e8:aa:f0:00:74:9e:3f:f8:71:c3:2c:ad:00:de:0f:69:5a:18: 6d:f1:31:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMjEyMTYxMzQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjM2YzYS03ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8+afGeIqBjGF18fRg2A2nQ8FDslz7yydKcCeZ19c6NIrm4sOqu0Z9uJ979z yZzAilEhqbxn16uUl0CuSv56n8RQxM2jzAJwUwuK5wiD1Estedq6LkqDk5ue1Zm4 805kQCuN4e75qu9wQYKPrpHK1ICRiL/KcT+p9YtXKOgU7wCcc+3hKYNdpuuHse7x sBp0T9tvdnbCxpwQKIGPK44fl7BIA+wykdaMAYOdUciRfP6ulc5HSTQ/kpqjhAG9 AnABe1RdVCvZHcpD4n3a9CncjRjPbFc5m2hVODHmZvwgoft6aQ8NFrMPHzWWc0Qk b3nySvUtcDpe+OGVNJs/MfBc6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAOo/c8J TqPLauvNHIoc2sNxbbCaMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvMzZEM0RDMzhB QTkzMTFFQ0I1Qzg4MDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAUrXOAwDQYJKoZIhvcNAQELBQADggEBAJxDpwV42SFNS6az ioJImAKTjoKDDyGLjGegRXNw6eaVLSK/+y4skM6V2jY3pR+2gDHrGqbVeUf/eLjn M2vmrb+j0ZDu0UFZ26nEpPKXDUtZACKq3PzqfE8P+/SFHQqDTFUiWrlOXMx/8CXM z2akO7gVDKqpc+aDW22ewyGdTDpuToNEcvzXd4LaQuCQ01CM2aikaTFQD/4aUTwe cdoxK1h4OkODmwij0vFtIlRwhhOlyRZN82DQFd2YirzaBGAsHNcwWhK3kQ6iqaDT DdRaaEvGxkEBKDKhvAWglTYcAfar047HVrIYAml8uuiq8AB0nj/4ccMsrQDeD2la GG3xMcE= -----END CERTIFICATE-----Generated at Sat Dec 20 22:51:12 2025 by rpki-client